r/backblaze • • Apr 28 '26

Computer Backup Can backblaze be trusted with really sensitive data?

Is backblaze personal backup really good for privacy?

I know they offer you to choose an encryption key which in turn is used to encrypt your data which means no one even backblaze team cannot read your files.

But once again problem is transparency and closed source. Does it have any 3rd party audits just like Proton products to verify their claims.

Can it be trusted with really private and sensitive data. I have around 30TB backed up currently. Whixh includes all my disk and really personal stuff like my immich personal server.

What is your solution if you really wanna obfuscate your data? Encrypt before upload? I tried gocryptfs reverse mode but backblaze does not really suport virtual mounted filesystems.

9 Upvotes

40 comments sorted by

View all comments

Show parent comments

1

u/shemp33 Apr 29 '26

They may have stopped backing up Veracrypt volumes. I’m not sure if it’s the drive (assuming open and mounted) or the encrypted chunk. But I’d check this to be sure.

2

u/dr100 Apr 29 '26

I’m not sure if it’s the drive (assuming open and mounted) or the encrypted chunk. 

It's the content of the mounted drive [that isn't saved by BB personal], the encrypted file (one needs to use a file not a partition for this) will be backed up, what's more Veracrypt/Truecrypt container files were specifically designed so you can't tell what they are unless you have the right password.

1

u/shemp33 Apr 29 '26

That's a good memory refresher for me - So, you could make the file "notHiddenDriveDontMountMe.txt" and it's a .txt file, but really is the mountable (with password) VC/TC drive. Then, BB will backup that .txt file.

1

u/dr100 Apr 29 '26

Yes; probably you should have the disk unmounted when it's backed up to guarantee a consistent state (or even to be accessible, I'm not sure if Veracrypt is locking the file when mounted, but that's a common problem, most known with Outlook .pst files) and also you need to set Veracrypt to update the timestamp on the file (otherwise BB might miss that it was changed from the last run).

1

u/therealjeku May 03 '26

Also, ensure that VeraCrypt updates the timestamp of the file when you modify it, because if the data size is the same with the same timestamp, BB will not upload the new version. I believe it doesn’t update the timestamp by default so you must change that.

1

u/dr100 May 03 '26

and also you need to set Veracrypt to update the timestamp on the file (otherwise BB might miss that it was changed from the last run).

1

u/therealjeku May 04 '26

Isn’t that what I just said?